@preth00nker send an email to [email protected] You should get a response in 24 hours or less.

All security bugs in rails should be reported by email to [email protected] . This list is delivered to a subset of the core team who handle security issues. Your email will be acknowledged within 24 hours, and you’ll receive a more detailed response to your email within 48 hours indicating the next steps in handling your report. This email address receives a large amount of spam, so be sure to use a descriptive subject line to avoid having your email getting lost in the spam and your report being missed. After the initial reply to your report the security team will endeavor to keep you informed of the progress being made towards a fix and full announcement. As recommended by RFPolicy these updates will be sent at least every five days, in reality this is more likely to be every 24-48 hours. If you have not received a reply to your email within 48 hours, or have not...